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We Claim : 

1. A module for controlling a drive, the module comprising: 



a terminal for connecting to a control system for operating 
tasks and a control system for safety tasks, commands from the 
control system for safety tasks having priority over commands 
from the control system for operating tasks; 

a microprocessor for processing the commands from both the 
control system for operating tasks and the control system for 
safety tasks, said microprocessor coupled to said terminal; 

a logic circuit for prioritizing the commands from the control 
system for safety tasks, said logic circuit connected to said 
microprocessor; 

at least one output coupled to at least one of said 
microprocessor and said logic circuit; 

an interface for connecting to one of the control system for 
operating tasks and a diagnostic device, said interface 
connected to said microprocessor; and 

a memory for storing the commands and replies, said memory 
connected to said microprocessor. 
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2. The module according to claim 1, wherein said 
microprocessor has a timing circuit. 

3. The module according to claim 1, wherein said logic 
circuit has a fixed-programmed priority function for the 
commands from the control system for safety tasks . 

4. The module according to claim 1, including at least one 
H= electronic protection device protecting against a short 

O circuit of and connected to said output. 

gj 5. The module according to claim 1, including coding plugs 

O disposed on a side of the module which is accessible in an 

O installed state. 

i 

Q 

Si 

6. The module according to claim 1, wherein the drive is used 
in an installation that can endanger public safety. 

7. A control device for an installation, comprising: 

two manual control stations being separate from one another; 
a control system for operating tasks; 
a control system for safety tasks; and 
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a module connected to each of said two manual control 
stations, said module including: 

a terminal connected to said control system for operating 
tasks and said control system for safety tasks, commands 
from said control system for safety tasks having priority 
over commands from said control system for operating 
tasks; 

O a microprocessor for processing the commands from both 

said control system for operating tasks and said control 
;? 2 system for safety tasks, said microprocessor coupled to 

Q said terminal ; 

N 

O a logic circuit for prioritizing the commands from said 

ry 

control system for safety tasks, said logic circuit 
connected to said microprocessor; 

at least one output coupled to at least one of said 
microprocessor and said logic circuit ; 

an interface connected to one of said control system for 
operating tasks and a diagnostic device, said interface 
connected to said microprocessor; and 
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a memory for storing the commands and replies, said 
memory connected to said microprocessor. 

8. A control method, which comprises: 

providing a control device having two manual control stations 
being separate from one another, and a module connected to 
each of the two manual control stations, the 
module containing: 

a terminal for connecting to a control system for 
operating tasks and a control system for safety tasks, 
commands from the control system for safety tasks having 
priority over commands from the control system for 
operating tasks; 

a microprocessor for processing the commands from both 
the control system for operating tasks and the control 
system for safety tasks, the microprocessor connected to 
the terminal ; 

a logic circuit for prioritizing the commands from the 
control system for safety tasks, the logic circuit 
connected to the microprocessor ; 
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at least one output coupled to at least one of the 
microprocessor and the logic circuit; 

an interface for connecting to one of the control system 
for operating tasks and a diagnostic device, the 
interface connected to the microprocessor; and 

a memory for storing the commands and replies, the memory 
connected to the microprocessor; and 

indicating a state of the drive in both of the two manual 
control stations. 

9. The method according to claim 8, which comprises using the 
diagnostic device for reading out software required for 
operating the module. 

10. The method according to claim 9, which comprises 
connecting the diagnostic device to a bus connected to the 
module . 

11. The method according to claim 9, which comprises 
connecting the diagnostic device to the interface of the 
module . 
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